bluetooth/hci_core.h

   1 /*
   2    BlueZ - Bluetooth protocol stack for Linux
   3    Copyright (c) 2000-2001, 2010, Code Aurora Forum. All rights reserved.
   4    Copyright 2023 NXP
   5
   6    Written 2000,2001 by Maxim Krasnyansky <maxk@qualcomm.com>
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License version 2 as
  10    published by the Free Software Foundation;
  11
  12    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  13    OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
  14    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
  15    IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
  16    CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
  17    WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  18    ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  19    OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  20
  21    ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
  22    COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
  23    SOFTWARE IS DISCLAIMED.
  24 */
  25
  26 #ifndef __HCI_CORE_H
  27 #define __HCI_CORE_H
  28
  29 #include <linux/idr.h>
  30 #include <linux/leds.h>
  31 #include <linux/rculist.h>
  32
  33 #include <net/bluetooth/hci.h>
  34 #include <net/bluetooth/hci_sync.h>
  35 #include <net/bluetooth/hci_sock.h>
  36 #include <net/bluetooth/coredump.h>
  37
  38 /* HCI priority */
  39 #define HCI_PRIO_MAX    7
  40
  41 /* HCI maximum id value */
  42 #define HCI_MAX_ID 10000
  43
  44 /* HCI Core structures */
  45 struct inquiry_data {
  46         bdaddr_t        bdaddr;
  47         __u8            pscan_rep_mode;
  48         __u8            pscan_period_mode;
  49         __u8            pscan_mode;
  50         __u8            dev_class[3];
  51         __le16          clock_offset;
  52         __s8            rssi;
  53         __u8            ssp_mode;
  54 };
  55
  56 struct inquiry_entry {
  57         struct list_head        all;            /* inq_cache.all */
  58         struct list_head        list;           /* unknown or resolve */
  59         enum {
  60                 NAME_NOT_KNOWN,
  61                 NAME_NEEDED,
  62                 NAME_PENDING,
  63                 NAME_KNOWN,
  64         } name_state;
  65         __u32                   timestamp;
  66         struct inquiry_data     data;
  67 };
  68
  69 struct discovery_state {
  70         int                     type;
  71         enum {
  72                 DISCOVERY_STOPPED,
  73                 DISCOVERY_STARTING,
  74                 DISCOVERY_FINDING,
  75                 DISCOVERY_RESOLVING,
  76                 DISCOVERY_STOPPING,
  77         } state;
  78         struct list_head        all;    /* All devices found during inquiry */
  79         struct list_head        unknown;        /* Name state not known */
  80         struct list_head        resolve;        /* Name needs to be resolved */
  81         __u32                   timestamp;
  82         bdaddr_t                last_adv_addr;
  83         u8                      last_adv_addr_type;
  84         s8                      last_adv_rssi;
  85         u32                     last_adv_flags;
  86         u8                      last_adv_data[HCI_MAX_EXT_AD_LENGTH];
  87         u8                      last_adv_data_len;
  88         bool                    report_invalid_rssi;
  89         bool                    result_filtering;
  90         bool                    limited;
  91         s8                      rssi;
  92         u16                     uuid_count;
  93         u8                      (*uuids)[16];
  94         unsigned long           scan_start;
  95         unsigned long           scan_duration;
  96         unsigned long           name_resolve_timeout;
  97 };
  98
  99 #define SUSPEND_NOTIFIER_TIMEOUT        msecs_to_jiffies(2000) /* 2 seconds */
 100
 101 enum suspend_tasks {
 102         SUSPEND_PAUSE_DISCOVERY,
 103         SUSPEND_UNPAUSE_DISCOVERY,
 104
 105         SUSPEND_PAUSE_ADVERTISING,
 106         SUSPEND_UNPAUSE_ADVERTISING,
 107
 108         SUSPEND_SCAN_DISABLE,
 109         SUSPEND_SCAN_ENABLE,
 110         SUSPEND_DISCONNECTING,
 111
 112         SUSPEND_POWERING_DOWN,
 113
 114         SUSPEND_PREPARE_NOTIFIER,
 115
 116         SUSPEND_SET_ADV_FILTER,
 117         __SUSPEND_NUM_TASKS
 118 };
 119
 120 enum suspended_state {
 121         BT_RUNNING = 0,
 122         BT_SUSPEND_DISCONNECT,
 123         BT_SUSPEND_CONFIGURE_WAKE,
 124 };
 125
 126 struct hci_conn_hash {
 127         struct list_head list;
 128         unsigned int     acl_num;
 129         unsigned int     amp_num;
 130         unsigned int     sco_num;
 131         unsigned int     iso_num;
 132         unsigned int     le_num;
 133         unsigned int     le_num_peripheral;
 134 };
 135
 136 struct bdaddr_list {
 137         struct list_head list;
 138         bdaddr_t bdaddr;
 139         u8 bdaddr_type;
 140 };
 141
 142 struct codec_list {
 143         struct list_head list;
 144         u8      id;
 145         __u16   cid;
 146         __u16   vid;
 147         u8      transport;
 148         u8      num_caps;
 149         u32     len;
 150         struct hci_codec_caps caps[];
 151 };
 152
 153 struct bdaddr_list_with_irk {
 154         struct list_head list;
 155         bdaddr_t bdaddr;
 156         u8 bdaddr_type;
 157         u8 peer_irk[16];
 158         u8 local_irk[16];
 159 };
 160
 161 /* Bitmask of connection flags */
 162 enum hci_conn_flags {
 163         HCI_CONN_FLAG_REMOTE_WAKEUP = 1,
 164         HCI_CONN_FLAG_DEVICE_PRIVACY = 2,
 165 };
 166 typedef u8 hci_conn_flags_t;
 167
 168 struct bdaddr_list_with_flags {
 169         struct list_head list;
 170         bdaddr_t bdaddr;
 171         u8 bdaddr_type;
 172         hci_conn_flags_t flags;
 173 };
 174
 175 struct bt_uuid {
 176         struct list_head list;
 177         u8 uuid[16];
 178         u8 size;
 179         u8 svc_hint;
 180 };
 181
 182 struct blocked_key {
 183         struct list_head list;
 184         struct rcu_head rcu;
 185         u8 type;
 186         u8 val[16];
 187 };
 188
 189 struct smp_csrk {
 190         bdaddr_t bdaddr;
 191         u8 bdaddr_type;
 192         u8 link_type;
 193         u8 type;
 194         u8 val[16];
 195 };
 196
 197 struct smp_ltk {
 198         struct list_head list;
 199         struct rcu_head rcu;
 200         bdaddr_t bdaddr;
 201         u8 bdaddr_type;
 202         u8 link_type;
 203         u8 authenticated;
 204         u8 type;
 205         u8 enc_size;
 206         __le16 ediv;
 207         __le64 rand;
 208         u8 val[16];
 209 };
 210
 211 struct smp_irk {
 212         struct list_head list;
 213         struct rcu_head rcu;
 214         bdaddr_t rpa;
 215         bdaddr_t bdaddr;
 216         u8 addr_type;
 217         u8 link_type;
 218         u8 val[16];
 219 };
 220
 221 struct link_key {
 222         struct list_head list;
 223         struct rcu_head rcu;
 224         bdaddr_t bdaddr;
 225         u8 bdaddr_type;
 226         u8 link_type;
 227         u8 type;
 228         u8 val[HCI_LINK_KEY_SIZE];
 229         u8 pin_len;
 230 };
 231
 232 struct oob_data {
 233         struct list_head list;
 234         bdaddr_t bdaddr;
 235         u8 bdaddr_type;
 236         u8 present;
 237         u8 hash192[16];
 238         u8 rand192[16];
 239         u8 hash256[16];
 240         u8 rand256[16];
 241 };
 242
 243 struct adv_info {
 244         struct list_head list;
 245         bool    enabled;
 246         bool    pending;
 247         bool    periodic;
 248         __u8    mesh;
 249         __u8    instance;
 250         __u32   flags;
 251         __u16   timeout;
 252         __u16   remaining_time;
 253         __u16   duration;
 254         __u16   adv_data_len;
 255         __u8    adv_data[HCI_MAX_EXT_AD_LENGTH];
 256         bool    adv_data_changed;
 257         __u16   scan_rsp_len;
 258         __u8    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
 259         bool    scan_rsp_changed;
 260         __u16   per_adv_data_len;
 261         __u8    per_adv_data[HCI_MAX_PER_AD_LENGTH];
 262         __s8    tx_power;
 263         __u32   min_interval;
 264         __u32   max_interval;
 265         bdaddr_t        random_addr;
 266         bool            rpa_expired;
 267         struct delayed_work     rpa_expired_cb;
 268 };
 269
 270 #define HCI_MAX_ADV_INSTANCES           5
 271 #define HCI_DEFAULT_ADV_DURATION        2
 272
 273 #define HCI_ADV_TX_POWER_NO_PREFERENCE 0x7F
 274
 275 #define DATA_CMP(_d1, _l1, _d2, _l2) \
 276         (_l1 == _l2 ? memcmp(_d1, _d2, _l1) : _l1 - _l2)
 277
 278 #define ADV_DATA_CMP(_adv, _data, _len) \
 279         DATA_CMP((_adv)->adv_data, (_adv)->adv_data_len, _data, _len)
 280
 281 #define SCAN_RSP_CMP(_adv, _data, _len) \
 282         DATA_CMP((_adv)->scan_rsp_data, (_adv)->scan_rsp_len, _data, _len)
 283
 284 struct monitored_device {
 285         struct list_head list;
 286
 287         bdaddr_t bdaddr;
 288         __u8     addr_type;
 289         __u16    handle;
 290         bool     notified;
 291 };
 292
 293 struct adv_pattern {
 294         struct list_head list;
 295         __u8 ad_type;
 296         __u8 offset;
 297         __u8 length;
 298         __u8 value[HCI_MAX_EXT_AD_LENGTH];
 299 };
 300
 301 struct adv_rssi_thresholds {
 302         __s8 low_threshold;
 303         __s8 high_threshold;
 304         __u16 low_threshold_timeout;
 305         __u16 high_threshold_timeout;
 306         __u8 sampling_period;
 307 };
 308
 309 struct adv_monitor {
 310         struct list_head patterns;
 311         struct adv_rssi_thresholds rssi;
 312         __u16           handle;
 313
 314         enum {
 315                 ADV_MONITOR_STATE_NOT_REGISTERED,
 316                 ADV_MONITOR_STATE_REGISTERED,
 317                 ADV_MONITOR_STATE_OFFLOADED
 318         } state;
 319 };
 320
 321 #define HCI_MIN_ADV_MONITOR_HANDLE              1
 322 #define HCI_MAX_ADV_MONITOR_NUM_HANDLES         32
 323 #define HCI_MAX_ADV_MONITOR_NUM_PATTERNS        16
 324 #define HCI_ADV_MONITOR_EXT_NONE                1
 325 #define HCI_ADV_MONITOR_EXT_MSFT                2
 326
 327 #define HCI_MAX_SHORT_NAME_LENGTH       10
 328
 329 #define HCI_CONN_HANDLE_MAX             0x0eff
 330 #define HCI_CONN_HANDLE_UNSET(_handle)  (_handle > HCI_CONN_HANDLE_MAX)
 331
 332 /* Min encryption key size to match with SMP */
 333 #define HCI_MIN_ENC_KEY_SIZE            7
 334
 335 /* Default LE RPA expiry time, 15 minutes */
 336 #define HCI_DEFAULT_RPA_TIMEOUT         (15 * 60)
 337
 338 /* Default min/max age of connection information (1s/3s) */
 339 #define DEFAULT_CONN_INFO_MIN_AGE       1000
 340 #define DEFAULT_CONN_INFO_MAX_AGE       3000
 341 /* Default authenticated payload timeout 30s */
 342 #define DEFAULT_AUTH_PAYLOAD_TIMEOUT   0x0bb8
 343
 344 struct amp_assoc {
 345         __u16   len;
 346         __u16   offset;
 347         __u16   rem_len;
 348         __u16   len_so_far;
 349         __u8    data[HCI_MAX_AMP_ASSOC_SIZE];
 350 };
 351
 352 #define HCI_MAX_PAGES   3
 353
 354 struct hci_dev {
 355         struct list_head list;
 356         struct mutex    lock;
 357
 358         struct ida      unset_handle_ida;
 359
 360         const char      *name;
 361         unsigned long   flags;
 362         __u16           id;
 363         __u8            bus;
 364         __u8            dev_type;
 365         bdaddr_t        bdaddr;
 366         bdaddr_t        setup_addr;
 367         bdaddr_t        public_addr;
 368         bdaddr_t        random_addr;
 369         bdaddr_t        static_addr;
 370         __u8            adv_addr_type;
 371         __u8            dev_name[HCI_MAX_NAME_LENGTH];
 372         __u8            short_name[HCI_MAX_SHORT_NAME_LENGTH];
 373         __u8            eir[HCI_MAX_EIR_LENGTH];
 374         __u16           appearance;
 375         __u8            dev_class[3];
 376         __u8            major_class;
 377         __u8            minor_class;
 378         __u8            max_page;
 379         __u8            features[HCI_MAX_PAGES][8];
 380         __u8            le_features[8];
 381         __u8            le_accept_list_size;
 382         __u8            le_resolv_list_size;
 383         __u8            le_num_of_adv_sets;
 384         __u8            le_states[8];
 385         __u8            mesh_ad_types[16];
 386         __u8            mesh_send_ref;
 387         __u8            commands[64];
 388         __u8            hci_ver;
 389         __u16           hci_rev;
 390         __u8            lmp_ver;
 391         __u16           manufacturer;
 392         __u16           lmp_subver;
 393         __u16           voice_setting;
 394         __u8            num_iac;
 395         __u16           stored_max_keys;
 396         __u16           stored_num_keys;
 397         __u8            io_capability;
 398         __s8            inq_tx_power;
 399         __u8            err_data_reporting;
 400         __u16           page_scan_interval;
 401         __u16           page_scan_window;
 402         __u8            page_scan_type;
 403         __u8            le_adv_channel_map;
 404         __u16           le_adv_min_interval;
 405         __u16           le_adv_max_interval;
 406         __u8            le_scan_type;
 407         __u16           le_scan_interval;
 408         __u16           le_scan_window;
 409         __u16           le_scan_int_suspend;
 410         __u16           le_scan_window_suspend;
 411         __u16           le_scan_int_discovery;
 412         __u16           le_scan_window_discovery;
 413         __u16           le_scan_int_adv_monitor;
 414         __u16           le_scan_window_adv_monitor;
 415         __u16           le_scan_int_connect;
 416         __u16           le_scan_window_connect;
 417         __u16           le_conn_min_interval;
 418         __u16           le_conn_max_interval;
 419         __u16           le_conn_latency;
 420         __u16           le_supv_timeout;
 421         __u16           le_def_tx_len;
 422         __u16           le_def_tx_time;
 423         __u16           le_max_tx_len;
 424         __u16           le_max_tx_time;
 425         __u16           le_max_rx_len;
 426         __u16           le_max_rx_time;
 427         __u8            le_max_key_size;
 428         __u8            le_min_key_size;
 429         __u16           discov_interleaved_timeout;
 430         __u16           conn_info_min_age;
 431         __u16           conn_info_max_age;
 432         __u16           auth_payload_timeout;
 433         __u8            min_enc_key_size;
 434         __u8            max_enc_key_size;
 435         __u8            pairing_opts;
 436         __u8            ssp_debug_mode;
 437         __u8            hw_error_code;
 438         __u32           clock;
 439         __u16           advmon_allowlist_duration;
 440         __u16           advmon_no_filter_duration;
 441         __u8            enable_advmon_interleave_scan;
 442
 443         __u16           devid_source;
 444         __u16           devid_vendor;
 445         __u16           devid_product;
 446         __u16           devid_version;
 447
 448         __u8            def_page_scan_type;
 449         __u16           def_page_scan_int;
 450         __u16           def_page_scan_window;
 451         __u8            def_inq_scan_type;
 452         __u16           def_inq_scan_int;
 453         __u16           def_inq_scan_window;
 454         __u16           def_br_lsto;
 455         __u16           def_page_timeout;
 456         __u16           def_multi_adv_rotation_duration;
 457         __u16           def_le_autoconnect_timeout;
 458         __s8            min_le_tx_power;
 459         __s8            max_le_tx_power;
 460
 461         __u16           pkt_type;
 462         __u16           esco_type;
 463         __u16           link_policy;
 464         __u16           link_mode;
 465
 466         __u32           idle_timeout;
 467         __u16           sniff_min_interval;
 468         __u16           sniff_max_interval;
 469
 470         __u8            amp_status;
 471         __u32           amp_total_bw;
 472         __u32           amp_max_bw;
 473         __u32           amp_min_latency;
 474         __u32           amp_max_pdu;
 475         __u8            amp_type;
 476         __u16           amp_pal_cap;
 477         __u16           amp_assoc_size;
 478         __u32           amp_max_flush_to;
 479         __u32           amp_be_flush_to;
 480
 481         struct amp_assoc        loc_assoc;
 482
 483         __u8            flow_ctl_mode;
 484
 485         unsigned int    auto_accept_delay;
 486
 487         unsigned long   quirks;
 488
 489         atomic_t        cmd_cnt;
 490         unsigned int    acl_cnt;
 491         unsigned int    sco_cnt;
 492         unsigned int    le_cnt;
 493         unsigned int    iso_cnt;
 494
 495         unsigned int    acl_mtu;
 496         unsigned int    sco_mtu;
 497         unsigned int    le_mtu;
 498         unsigned int    iso_mtu;
 499         unsigned int    acl_pkts;
 500         unsigned int    sco_pkts;
 501         unsigned int    le_pkts;
 502         unsigned int    iso_pkts;
 503
 504         __u16           block_len;
 505         __u16           block_mtu;
 506         __u16           num_blocks;
 507         __u16           block_cnt;
 508
 509         unsigned long   acl_last_tx;
 510         unsigned long   sco_last_tx;
 511         unsigned long   le_last_tx;
 512
 513         __u8            le_tx_def_phys;
 514         __u8            le_rx_def_phys;
 515
 516         struct workqueue_struct *workqueue;
 517         struct workqueue_struct *req_workqueue;
 518
 519         struct work_struct      power_on;
 520         struct delayed_work     power_off;
 521         struct work_struct      error_reset;
 522         struct work_struct      cmd_sync_work;
 523         struct list_head        cmd_sync_work_list;
 524         struct mutex            cmd_sync_work_lock;
 525         struct mutex            unregister_lock;
 526         struct work_struct      cmd_sync_cancel_work;
 527         struct work_struct      reenable_adv_work;
 528
 529         __u16                   discov_timeout;
 530         struct delayed_work     discov_off;
 531
 532         struct delayed_work     service_cache;
 533
 534         struct delayed_work     cmd_timer;
 535         struct delayed_work     ncmd_timer;
 536
 537         struct work_struct      rx_work;
 538         struct work_struct      cmd_work;
 539         struct work_struct      tx_work;
 540
 541         struct delayed_work     le_scan_disable;
 542         struct delayed_work     le_scan_restart;
 543
 544         struct sk_buff_head     rx_q;
 545         struct sk_buff_head     raw_q;
 546         struct sk_buff_head     cmd_q;
 547
 548         struct sk_buff          *sent_cmd;
 549         struct sk_buff          *recv_event;
 550
 551         struct mutex            req_lock;
 552         wait_queue_head_t       req_wait_q;
 553         __u32                   req_status;
 554         __u32                   req_result;
 555         struct sk_buff          *req_skb;
 556
 557         void                    *smp_data;
 558         void                    *smp_bredr_data;
 559
 560         struct discovery_state  discovery;
 561
 562         int                     discovery_old_state;
 563         bool                    discovery_paused;
 564         int                     advertising_old_state;
 565         bool                    advertising_paused;
 566
 567         struct notifier_block   suspend_notifier;
 568         enum suspended_state    suspend_state_next;
 569         enum suspended_state    suspend_state;
 570         bool                    scanning_paused;
 571         bool                    suspended;
 572         u8                      wake_reason;
 573         bdaddr_t                wake_addr;
 574         u8                      wake_addr_type;
 575
 576         struct hci_conn_hash    conn_hash;
 577
 578         struct list_head        mesh_pending;
 579         struct list_head        mgmt_pending;
 580         struct list_head        reject_list;
 581         struct list_head        accept_list;
 582         struct list_head        uuids;
 583         struct list_head        link_keys;
 584         struct list_head        long_term_keys;
 585         struct list_head        identity_resolving_keys;
 586         struct list_head        remote_oob_data;
 587         struct list_head        le_accept_list;
 588         struct list_head        le_resolv_list;
 589         struct list_head        le_conn_params;
 590         struct list_head        pend_le_conns;
 591         struct list_head        pend_le_reports;
 592         struct list_head        blocked_keys;
 593         struct list_head        local_codecs;
 594
 595         struct hci_dev_stats    stat;
 596
 597         atomic_t                promisc;
 598
 599         const char              *hw_info;
 600         const char              *fw_info;
 601         struct dentry           *debugfs;
 602
 603         struct hci_devcoredump  dump;
 604
 605         struct device           dev;
 606
 607         struct rfkill           *rfkill;
 608
 609         DECLARE_BITMAP(dev_flags, __HCI_NUM_FLAGS);
 610         hci_conn_flags_t        conn_flags;
 611
 612         __s8                    adv_tx_power;
 613         __u8                    adv_data[HCI_MAX_EXT_AD_LENGTH];
 614         __u8                    adv_data_len;
 615         __u8                    scan_rsp_data[HCI_MAX_EXT_AD_LENGTH];
 616         __u8                    scan_rsp_data_len;
 617         __u8                    per_adv_data[HCI_MAX_PER_AD_LENGTH];
 618         __u8                    per_adv_data_len;
 619
 620         struct list_head        adv_instances;
 621         unsigned int            adv_instance_cnt;
 622         __u8                    cur_adv_instance;
 623         __u16                   adv_instance_timeout;
 624         struct delayed_work     adv_instance_expire;
 625
 626         struct idr              adv_monitors_idr;
 627         unsigned int            adv_monitors_cnt;
 628
 629         __u8                    irk[16];
 630         __u32                   rpa_timeout;
 631         struct delayed_work     rpa_expired;
 632         bdaddr_t                rpa;
 633
 634         struct delayed_work     mesh_send_done;
 635
 636         enum {
 637                 INTERLEAVE_SCAN_NONE,
 638                 INTERLEAVE_SCAN_NO_FILTER,
 639                 INTERLEAVE_SCAN_ALLOWLIST
 640         } interleave_scan_state;
 641
 642         struct delayed_work     interleave_scan;
 643
 644         struct list_head        monitored_devices;
 645         bool                    advmon_pend_notify;
 646
 647 #if IS_ENABLED(CONFIG_BT_LEDS)
 648         struct led_trigger      *power_led;
 649 #endif
 650
 651 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
 652         __u16                   msft_opcode;
 653         void                    *msft_data;
 654         bool                    msft_curve_validity;
 655 #endif
 656
 657 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
 658         bool                    aosp_capable;
 659         bool                    aosp_quality_report;
 660 #endif
 661
 662         int (*open)(struct hci_dev *hdev);
 663         int (*close)(struct hci_dev *hdev);
 664         int (*flush)(struct hci_dev *hdev);
 665         int (*setup)(struct hci_dev *hdev);
 666         int (*shutdown)(struct hci_dev *hdev);
 667         int (*send)(struct hci_dev *hdev, struct sk_buff *skb);
 668         void (*notify)(struct hci_dev *hdev, unsigned int evt);
 669         void (*hw_error)(struct hci_dev *hdev, u8 code);
 670         int (*post_init)(struct hci_dev *hdev);
 671         int (*set_diag)(struct hci_dev *hdev, bool enable);
 672         int (*set_bdaddr)(struct hci_dev *hdev, const bdaddr_t *bdaddr);
 673         void (*cmd_timeout)(struct hci_dev *hdev);
 674         void (*reset)(struct hci_dev *hdev);
 675         bool (*wakeup)(struct hci_dev *hdev);
 676         int (*set_quality_report)(struct hci_dev *hdev, bool enable);
 677         int (*get_data_path_id)(struct hci_dev *hdev, __u8 *data_path);
 678         int (*get_codec_config_data)(struct hci_dev *hdev, __u8 type,
 679                                      struct bt_codec *codec, __u8 *vnd_len,
 680                                      __u8 **vnd_data);
 681 };
 682
 683 #define HCI_PHY_HANDLE(handle)  (handle & 0xff)
 684
 685 enum conn_reasons {
 686         CONN_REASON_PAIR_DEVICE,
 687         CONN_REASON_L2CAP_CHAN,
 688         CONN_REASON_SCO_CONNECT,
 689         CONN_REASON_ISO_CONNECT,
 690 };
 691
 692 struct hci_conn {
 693         struct list_head list;
 694
 695         atomic_t        refcnt;
 696
 697         bdaddr_t        dst;
 698         __u8            dst_type;
 699         bdaddr_t        src;
 700         __u8            src_type;
 701         bdaddr_t        init_addr;
 702         __u8            init_addr_type;
 703         bdaddr_t        resp_addr;
 704         __u8            resp_addr_type;
 705         __u8            adv_instance;
 706         __u16           handle;
 707         __u16           sync_handle;
 708         __u16           state;
 709         __u8            mode;
 710         __u8            type;
 711         __u8            role;
 712         bool            out;
 713         __u8            attempt;
 714         __u8            dev_class[3];
 715         __u8            features[HCI_MAX_PAGES][8];
 716         __u16           pkt_type;
 717         __u16           link_policy;
 718         __u8            key_type;
 719         __u8            auth_type;
 720         __u8            sec_level;
 721         __u8            pending_sec_level;
 722         __u8            pin_length;
 723         __u8            enc_key_size;
 724         __u8            io_capability;
 725         __u32           passkey_notify;
 726         __u8            passkey_entered;
 727         __u16           disc_timeout;
 728         __u16           conn_timeout;
 729         __u16           setting;
 730         __u16           auth_payload_timeout;
 731         __u16           le_conn_min_interval;
 732         __u16           le_conn_max_interval;
 733         __u16           le_conn_interval;
 734         __u16           le_conn_latency;
 735         __u16           le_supv_timeout;
 736         __u8            le_adv_data[HCI_MAX_EXT_AD_LENGTH];
 737         __u8            le_adv_data_len;
 738         __u8            le_per_adv_data[HCI_MAX_PER_AD_LENGTH];
 739         __u8            le_per_adv_data_len;
 740         __u8            le_tx_phy;
 741         __u8            le_rx_phy;
 742         __s8            rssi;
 743         __s8            tx_power;
 744         __s8            max_tx_power;
 745         struct bt_iso_qos iso_qos;
 746         unsigned long   flags;
 747
 748         enum conn_reasons conn_reason;
 749         __u8            abort_reason;
 750
 751         __u32           clock;
 752         __u16           clock_accuracy;
 753
 754         unsigned long   conn_info_timestamp;
 755
 756         __u8            remote_cap;
 757         __u8            remote_auth;
 758         __u8            remote_id;
 759
 760         unsigned int    sent;
 761
 762         struct sk_buff_head data_q;
 763         struct list_head chan_list;
 764
 765         struct delayed_work disc_work;
 766         struct delayed_work auto_accept_work;
 767         struct delayed_work idle_work;
 768         struct delayed_work le_conn_timeout;
 769
 770         struct device   dev;
 771         struct dentry   *debugfs;
 772
 773         struct hci_dev  *hdev;
 774         void            *l2cap_data;
 775         void            *sco_data;
 776         void            *iso_data;
 777         struct amp_mgr  *amp_mgr;
 778
 779         struct list_head link_list;
 780         struct hci_conn *parent;
 781         struct hci_link *link;
 782
 783         struct bt_codec codec;
 784
 785         void (*connect_cfm_cb)  (struct hci_conn *conn, u8 status);
 786         void (*security_cfm_cb) (struct hci_conn *conn, u8 status);
 787         void (*disconn_cfm_cb)  (struct hci_conn *conn, u8 reason);
 788
 789         void (*cleanup)(struct hci_conn *conn);
 790 };
 791
 792 struct hci_link {
 793         struct list_head list;
 794         struct hci_conn *conn;
 795 };
 796
 797 struct hci_chan {
 798         struct list_head list;
 799         __u16 handle;
 800         struct hci_conn *conn;
 801         struct sk_buff_head data_q;
 802         unsigned int    sent;
 803         __u8            state;
 804         bool            amp;
 805 };
 806
 807 struct hci_conn_params {
 808         struct list_head list;
 809         struct list_head action;
 810
 811         bdaddr_t addr;
 812         u8 addr_type;
 813
 814         u16 conn_min_interval;
 815         u16 conn_max_interval;
 816         u16 conn_latency;
 817         u16 supervision_timeout;
 818
 819         enum {
 820                 HCI_AUTO_CONN_DISABLED,
 821                 HCI_AUTO_CONN_REPORT,
 822                 HCI_AUTO_CONN_DIRECT,
 823                 HCI_AUTO_CONN_ALWAYS,
 824                 HCI_AUTO_CONN_LINK_LOSS,
 825                 HCI_AUTO_CONN_EXPLICIT,
 826         } auto_connect;
 827
 828         struct hci_conn *conn;
 829         bool explicit_connect;
 830         /* Accessed without hdev->lock: */
 831         hci_conn_flags_t flags;
 832         u8  privacy_mode;
 833 };
 834
 835 extern struct list_head hci_dev_list;
 836 extern struct list_head hci_cb_list;
 837 extern rwlock_t hci_dev_list_lock;
 838 extern struct mutex hci_cb_list_lock;
 839
 840 #define hci_dev_set_flag(hdev, nr)             set_bit((nr), (hdev)->dev_flags)
 841 #define hci_dev_clear_flag(hdev, nr)           clear_bit((nr), (hdev)->dev_flags)
 842 #define hci_dev_change_flag(hdev, nr)          change_bit((nr), (hdev)->dev_flags)
 843 #define hci_dev_test_flag(hdev, nr)            test_bit((nr), (hdev)->dev_flags)
 844 #define hci_dev_test_and_set_flag(hdev, nr)    test_and_set_bit((nr), (hdev)->dev_flags)
 845 #define hci_dev_test_and_clear_flag(hdev, nr)  test_and_clear_bit((nr), (hdev)->dev_flags)
 846 #define hci_dev_test_and_change_flag(hdev, nr) test_and_change_bit((nr), (hdev)->dev_flags)
 847
 848 #define hci_dev_clear_volatile_flags(hdev)                      \
 849         do {                                                    \
 850                 hci_dev_clear_flag(hdev, HCI_LE_SCAN);          \
 851                 hci_dev_clear_flag(hdev, HCI_LE_ADV);           \
 852                 hci_dev_clear_flag(hdev, HCI_LL_RPA_RESOLUTION);\
 853                 hci_dev_clear_flag(hdev, HCI_PERIODIC_INQ);     \
 854                 hci_dev_clear_flag(hdev, HCI_QUALITY_REPORT);   \
 855         } while (0)
 856
 857 #define hci_dev_le_state_simultaneous(hdev) \
 858         (test_bit(HCI_QUIRK_VALID_LE_STATES, &hdev->quirks) && \
 859          (hdev->le_states[4] & 0x08) && /* Central */ \
 860          (hdev->le_states[4] & 0x40) && /* Peripheral */ \
 861          (hdev->le_states[3] & 0x10))   /* Simultaneous */
 862
 863 /* ----- HCI interface to upper protocols ----- */
 864 int l2cap_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr);
 865 int l2cap_disconn_ind(struct hci_conn *hcon);
 866 void l2cap_recv_acldata(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 867
 868 #if IS_ENABLED(CONFIG_BT_BREDR)
 869 int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 870 void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb);
 871 #else
 872 static inline int sco_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 873                                   __u8 *flags)
 874 {
 875         return 0;
 876 }
 877
 878 static inline void sco_recv_scodata(struct hci_conn *hcon, struct sk_buff *skb)
 879 {
 880 }
 881 #endif
 882
 883 #if IS_ENABLED(CONFIG_BT_LE)
 884 int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr, __u8 *flags);
 885 void iso_recv(struct hci_conn *hcon, struct sk_buff *skb, u16 flags);
 886 #else
 887 static inline int iso_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
 888                                   __u8 *flags)
 889 {
 890         return 0;
 891 }
 892 static inline void iso_recv(struct hci_conn *hcon, struct sk_buff *skb,
 893                             u16 flags)
 894 {
 895 }
 896 #endif
 897
 898 /* ----- Inquiry cache ----- */
 899 #define INQUIRY_CACHE_AGE_MAX   (HZ*30)   /* 30 seconds */
 900 #define INQUIRY_ENTRY_AGE_MAX   (HZ*60)   /* 60 seconds */
 901
 902 static inline void discovery_init(struct hci_dev *hdev)
 903 {
 904         hdev->discovery.state = DISCOVERY_STOPPED;
 905         INIT_LIST_HEAD(&hdev->discovery.all);
 906         INIT_LIST_HEAD(&hdev->discovery.unknown);
 907         INIT_LIST_HEAD(&hdev->discovery.resolve);
 908         hdev->discovery.report_invalid_rssi = true;
 909         hdev->discovery.rssi = HCI_RSSI_INVALID;
 910 }
 911
 912 static inline void hci_discovery_filter_clear(struct hci_dev *hdev)
 913 {
 914         hdev->discovery.result_filtering = false;
 915         hdev->discovery.report_invalid_rssi = true;
 916         hdev->discovery.rssi = HCI_RSSI_INVALID;
 917         hdev->discovery.uuid_count = 0;
 918         kfree(hdev->discovery.uuids);
 919         hdev->discovery.uuids = NULL;
 920         hdev->discovery.scan_start = 0;
 921         hdev->discovery.scan_duration = 0;
 922 }
 923
 924 bool hci_discovery_active(struct hci_dev *hdev);
 925
 926 void hci_discovery_set_state(struct hci_dev *hdev, int state);
 927
 928 static inline int inquiry_cache_empty(struct hci_dev *hdev)
 929 {
 930         return list_empty(&hdev->discovery.all);
 931 }
 932
 933 static inline long inquiry_cache_age(struct hci_dev *hdev)
 934 {
 935         struct discovery_state *c = &hdev->discovery;
 936         return jiffies - c->timestamp;
 937 }
 938
 939 static inline long inquiry_entry_age(struct inquiry_entry *e)
 940 {
 941         return jiffies - e->timestamp;
 942 }
 943
 944 struct inquiry_entry *hci_inquiry_cache_lookup(struct hci_dev *hdev,
 945                                                bdaddr_t *bdaddr);
 946 struct inquiry_entry *hci_inquiry_cache_lookup_unknown(struct hci_dev *hdev,
 947                                                        bdaddr_t *bdaddr);
 948 struct inquiry_entry *hci_inquiry_cache_lookup_resolve(struct hci_dev *hdev,
 949                                                        bdaddr_t *bdaddr,
 950                                                        int state);
 951 void hci_inquiry_cache_update_resolve(struct hci_dev *hdev,
 952                                       struct inquiry_entry *ie);
 953 u32 hci_inquiry_cache_update(struct hci_dev *hdev, struct inquiry_data *data,
 954                              bool name_known);
 955 void hci_inquiry_cache_flush(struct hci_dev *hdev);
 956
 957 /* ----- HCI Connections ----- */
 958 enum {
 959         HCI_CONN_AUTH_PEND,
 960         HCI_CONN_REAUTH_PEND,
 961         HCI_CONN_ENCRYPT_PEND,
 962         HCI_CONN_RSWITCH_PEND,
 963         HCI_CONN_MODE_CHANGE_PEND,
 964         HCI_CONN_SCO_SETUP_PEND,
 965         HCI_CONN_MGMT_CONNECTED,
 966         HCI_CONN_SSP_ENABLED,
 967         HCI_CONN_SC_ENABLED,
 968         HCI_CONN_AES_CCM,
 969         HCI_CONN_POWER_SAVE,
 970         HCI_CONN_FLUSH_KEY,
 971         HCI_CONN_ENCRYPT,
 972         HCI_CONN_AUTH,
 973         HCI_CONN_SECURE,
 974         HCI_CONN_FIPS,
 975         HCI_CONN_STK_ENCRYPT,
 976         HCI_CONN_AUTH_INITIATOR,
 977         HCI_CONN_DROP,
 978         HCI_CONN_CANCEL,
 979         HCI_CONN_PARAM_REMOVAL_PEND,
 980         HCI_CONN_NEW_LINK_KEY,
 981         HCI_CONN_SCANNING,
 982         HCI_CONN_AUTH_FAILURE,
 983         HCI_CONN_PER_ADV,
 984         HCI_CONN_BIG_CREATED,
 985         HCI_CONN_CREATE_CIS,
 986         HCI_CONN_BIG_SYNC,
 987         HCI_CONN_BIG_SYNC_FAILED,
 988         HCI_CONN_PA_SYNC,
 989         HCI_CONN_PA_SYNC_FAILED,
 990 };
 991
 992 static inline bool hci_conn_ssp_enabled(struct hci_conn *conn)
 993 {
 994         struct hci_dev *hdev = conn->hdev;
 995         return hci_dev_test_flag(hdev, HCI_SSP_ENABLED) &&
 996                test_bit(HCI_CONN_SSP_ENABLED, &conn->flags);
 997 }
 998
 999 static inline bool hci_conn_sc_enabled(struct hci_conn *conn)
1000 {
1001         struct hci_dev *hdev = conn->hdev;
1002         return hci_dev_test_flag(hdev, HCI_SC_ENABLED) &&
1003                test_bit(HCI_CONN_SC_ENABLED, &conn->flags);
1004 }
1005
1006 static inline void hci_conn_hash_add(struct hci_dev *hdev, struct hci_conn *c)
1007 {
1008         struct hci_conn_hash *h = &hdev->conn_hash;
1009         list_add_tail_rcu(&c->list, &h->list);
1010         switch (c->type) {
1011         case ACL_LINK:
1012                 h->acl_num++;
1013                 break;
1014         case AMP_LINK:
1015                 h->amp_num++;
1016                 break;
1017         case LE_LINK:
1018                 h->le_num++;
1019                 if (c->role == HCI_ROLE_SLAVE)
1020                         h->le_num_peripheral++;
1021                 break;
1022         case SCO_LINK:
1023         case ESCO_LINK:
1024                 h->sco_num++;
1025                 break;
1026         case ISO_LINK:
1027                 h->iso_num++;
1028                 break;
1029         }
1030 }
1031
1032 static inline void hci_conn_hash_del(struct hci_dev *hdev, struct hci_conn *c)
1033 {
1034         struct hci_conn_hash *h = &hdev->conn_hash;
1035
1036         list_del_rcu(&c->list);
1037         synchronize_rcu();
1038
1039         switch (c->type) {
1040         case ACL_LINK:
1041                 h->acl_num--;
1042                 break;
1043         case AMP_LINK:
1044                 h->amp_num--;
1045                 break;
1046         case LE_LINK:
1047                 h->le_num--;
1048                 if (c->role == HCI_ROLE_SLAVE)
1049                         h->le_num_peripheral--;
1050                 break;
1051         case SCO_LINK:
1052         case ESCO_LINK:
1053                 h->sco_num--;
1054                 break;
1055         case ISO_LINK:
1056                 h->iso_num--;
1057                 break;
1058         }
1059 }
1060
1061 static inline unsigned int hci_conn_num(struct hci_dev *hdev, __u8 type)
1062 {
1063         struct hci_conn_hash *h = &hdev->conn_hash;
1064         switch (type) {
1065         case ACL_LINK:
1066                 return h->acl_num;
1067         case AMP_LINK:
1068                 return h->amp_num;
1069         case LE_LINK:
1070                 return h->le_num;
1071         case SCO_LINK:
1072         case ESCO_LINK:
1073                 return h->sco_num;
1074         case ISO_LINK:
1075                 return h->iso_num;
1076         default:
1077                 return 0;
1078         }
1079 }
1080
1081 static inline unsigned int hci_conn_count(struct hci_dev *hdev)
1082 {
1083         struct hci_conn_hash *c = &hdev->conn_hash;
1084
1085         return c->acl_num + c->amp_num + c->sco_num + c->le_num + c->iso_num;
1086 }
1087
1088 static inline __u8 hci_conn_lookup_type(struct hci_dev *hdev, __u16 handle)
1089 {
1090         struct hci_conn_hash *h = &hdev->conn_hash;
1091         struct hci_conn *c;
1092         __u8 type = INVALID_LINK;
1093
1094         rcu_read_lock();
1095
1096         list_for_each_entry_rcu(c, &h->list, list) {
1097                 if (c->handle == handle) {
1098                         type = c->type;
1099                         break;
1100                 }
1101         }
1102
1103         rcu_read_unlock();
1104
1105         return type;
1106 }
1107
1108 static inline struct hci_conn *hci_conn_hash_lookup_bis(struct hci_dev *hdev,
1109                                                         bdaddr_t *ba, __u8 bis)
1110 {
1111         struct hci_conn_hash *h = &hdev->conn_hash;
1112         struct hci_conn  *c;
1113
1114         rcu_read_lock();
1115
1116         list_for_each_entry_rcu(c, &h->list, list) {
1117                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK)
1118                         continue;
1119
1120                 if (c->iso_qos.bcast.bis == bis) {
1121                         rcu_read_unlock();
1122                         return c;
1123                 }
1124         }
1125         rcu_read_unlock();
1126
1127         return NULL;
1128 }
1129
1130 static inline struct hci_conn *
1131 hci_conn_hash_lookup_per_adv_bis(struct hci_dev *hdev,
1132                                  bdaddr_t *ba,
1133                                  __u8 big, __u8 bis)
1134 {
1135         struct hci_conn_hash *h = &hdev->conn_hash;
1136         struct hci_conn  *c;
1137
1138         rcu_read_lock();
1139
1140         list_for_each_entry_rcu(c, &h->list, list) {
1141                 if (bacmp(&c->dst, ba) || c->type != ISO_LINK ||
1142                         !test_bit(HCI_CONN_PER_ADV, &c->flags))
1143                         continue;
1144
1145                 if (c->iso_qos.bcast.big == big &&
1146                     c->iso_qos.bcast.bis == bis) {
1147                         rcu_read_unlock();
1148                         return c;
1149                 }
1150         }
1151         rcu_read_unlock();
1152
1153         return NULL;
1154 }
1155
1156 static inline struct hci_conn *hci_conn_hash_lookup_handle(struct hci_dev *hdev,
1157                                                                 __u16 handle)
1158 {
1159         struct hci_conn_hash *h = &hdev->conn_hash;
1160         struct hci_conn  *c;
1161
1162         rcu_read_lock();
1163
1164         list_for_each_entry_rcu(c, &h->list, list) {
1165                 if (c->handle == handle) {
1166                         rcu_read_unlock();
1167                         return c;
1168                 }
1169         }
1170         rcu_read_unlock();
1171
1172         return NULL;
1173 }
1174
1175 static inline struct hci_conn *hci_conn_hash_lookup_ba(struct hci_dev *hdev,
1176                                                         __u8 type, bdaddr_t *ba)
1177 {
1178         struct hci_conn_hash *h = &hdev->conn_hash;
1179         struct hci_conn  *c;
1180
1181         rcu_read_lock();
1182
1183         list_for_each_entry_rcu(c, &h->list, list) {
1184                 if (c->type == type && !bacmp(&c->dst, ba)) {
1185                         rcu_read_unlock();
1186                         return c;
1187                 }
1188         }
1189
1190         rcu_read_unlock();
1191
1192         return NULL;
1193 }
1194
1195 static inline struct hci_conn *hci_conn_hash_lookup_le(struct hci_dev *hdev,
1196                                                        bdaddr_t *ba,
1197                                                        __u8 ba_type)
1198 {
1199         struct hci_conn_hash *h = &hdev->conn_hash;
1200         struct hci_conn  *c;
1201
1202         rcu_read_lock();
1203
1204         list_for_each_entry_rcu(c, &h->list, list) {
1205                 if (c->type != LE_LINK)
1206                        continue;
1207
1208                 if (ba_type == c->dst_type && !bacmp(&c->dst, ba)) {
1209                         rcu_read_unlock();
1210                         return c;
1211                 }
1212         }
1213
1214         rcu_read_unlock();
1215
1216         return NULL;
1217 }
1218
1219 static inline struct hci_conn *hci_conn_hash_lookup_cis(struct hci_dev *hdev,
1220                                                         bdaddr_t *ba,
1221                                                         __u8 ba_type,
1222                                                         __u8 cig,
1223                                                         __u8 id)
1224 {
1225         struct hci_conn_hash *h = &hdev->conn_hash;
1226         struct hci_conn  *c;
1227
1228         rcu_read_lock();
1229
1230         list_for_each_entry_rcu(c, &h->list, list) {
1231                 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1232                         continue;
1233
1234                 /* Match CIG ID if set */
1235                 if (cig != c->iso_qos.ucast.cig)
1236                         continue;
1237
1238                 /* Match CIS ID if set */
1239                 if (id != c->iso_qos.ucast.cis)
1240                         continue;
1241
1242                 /* Match destination address if set */
1243                 if (!ba || (ba_type == c->dst_type && !bacmp(&c->dst, ba))) {
1244                         rcu_read_unlock();
1245                         return c;
1246                 }
1247         }
1248
1249         rcu_read_unlock();
1250
1251         return NULL;
1252 }
1253
1254 static inline struct hci_conn *hci_conn_hash_lookup_cig(struct hci_dev *hdev,
1255                                                         __u8 handle)
1256 {
1257         struct hci_conn_hash *h = &hdev->conn_hash;
1258         struct hci_conn  *c;
1259
1260         rcu_read_lock();
1261
1262         list_for_each_entry_rcu(c, &h->list, list) {
1263                 if (c->type != ISO_LINK || !bacmp(&c->dst, BDADDR_ANY))
1264                         continue;
1265
1266                 if (handle == c->iso_qos.ucast.cig) {
1267                         rcu_read_unlock();
1268                         return c;
1269                 }
1270         }
1271
1272         rcu_read_unlock();
1273
1274         return NULL;
1275 }
1276
1277 static inline struct hci_conn *hci_conn_hash_lookup_big(struct hci_dev *hdev,
1278                                                         __u8 handle)
1279 {
1280         struct hci_conn_hash *h = &hdev->conn_hash;
1281         struct hci_conn  *c;
1282
1283         rcu_read_lock();
1284
1285         list_for_each_entry_rcu(c, &h->list, list) {
1286                 if (bacmp(&c->dst, BDADDR_ANY) || c->type != ISO_LINK)
1287                         continue;
1288
1289                 if (handle == c->iso_qos.bcast.big) {
1290                         rcu_read_unlock();
1291                         return c;
1292                 }
1293         }
1294
1295         rcu_read_unlock();
1296
1297         return NULL;
1298 }
1299
1300 static inline struct hci_conn *
1301 hci_conn_hash_lookup_pa_sync_big_handle(struct hci_dev *hdev, __u8 big)
1302 {
1303         struct hci_conn_hash *h = &hdev->conn_hash;
1304         struct hci_conn  *c;
1305
1306         rcu_read_lock();
1307
1308         list_for_each_entry_rcu(c, &h->list, list) {
1309                 if (c->type != ISO_LINK ||
1310                         !test_bit(HCI_CONN_PA_SYNC, &c->flags))
1311                         continue;
1312
1313                 if (c->iso_qos.bcast.big == big) {
1314                         rcu_read_unlock();
1315                         return c;
1316                 }
1317         }
1318         rcu_read_unlock();
1319
1320         return NULL;
1321 }
1322
1323 static inline struct hci_conn *
1324 hci_conn_hash_lookup_pa_sync_handle(struct hci_dev *hdev, __u16 sync_handle)
1325 {
1326         struct hci_conn_hash *h = &hdev->conn_hash;
1327         struct hci_conn  *c;
1328
1329         rcu_read_lock();
1330
1331         list_for_each_entry_rcu(c, &h->list, list) {
1332                 if (c->type != ISO_LINK ||
1333                         !test_bit(HCI_CONN_PA_SYNC, &c->flags))
1334                         continue;
1335
1336                 if (c->sync_handle == sync_handle) {
1337                         rcu_read_unlock();
1338                         return c;
1339                 }
1340         }
1341         rcu_read_unlock();
1342
1343         return NULL;
1344 }
1345
1346 static inline struct hci_conn *hci_conn_hash_lookup_state(struct hci_dev *hdev,
1347                                                         __u8 type, __u16 state)
1348 {
1349         struct hci_conn_hash *h = &hdev->conn_hash;
1350         struct hci_conn  *c;
1351
1352         rcu_read_lock();
1353
1354         list_for_each_entry_rcu(c, &h->list, list) {
1355                 if (c->type == type && c->state == state) {
1356                         rcu_read_unlock();
1357                         return c;
1358                 }
1359         }
1360
1361         rcu_read_unlock();
1362
1363         return NULL;
1364 }
1365
1366 typedef void (*hci_conn_func_t)(struct hci_conn *conn, void *data);
1367 static inline void hci_conn_hash_list_state(struct hci_dev *hdev,
1368                                             hci_conn_func_t func, __u8 type,
1369                                             __u16 state, void *data)
1370 {
1371         struct hci_conn_hash *h = &hdev->conn_hash;
1372         struct hci_conn  *c;
1373
1374         if (!func)
1375                 return;
1376
1377         rcu_read_lock();
1378
1379         list_for_each_entry_rcu(c, &h->list, list) {
1380                 if (c->type == type && c->state == state)
1381                         func(c, data);
1382         }
1383
1384         rcu_read_unlock();
1385 }
1386
1387 static inline void hci_conn_hash_list_flag(struct hci_dev *hdev,
1388                                             hci_conn_func_t func, __u8 type,
1389                                             __u8 flag, void *data)
1390 {
1391         struct hci_conn_hash *h = &hdev->conn_hash;
1392         struct hci_conn  *c;
1393
1394         if (!func)
1395                 return;
1396
1397         rcu_read_lock();
1398
1399         list_for_each_entry_rcu(c, &h->list, list) {
1400                 if (c->type == type && test_bit(flag, &c->flags))
1401                         func(c, data);
1402         }
1403
1404         rcu_read_unlock();
1405 }
1406
1407 static inline struct hci_conn *hci_lookup_le_connect(struct hci_dev *hdev)
1408 {
1409         struct hci_conn_hash *h = &hdev->conn_hash;
1410         struct hci_conn  *c;
1411
1412         rcu_read_lock();
1413
1414         list_for_each_entry_rcu(c, &h->list, list) {
1415                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1416                     !test_bit(HCI_CONN_SCANNING, &c->flags)) {
1417                         rcu_read_unlock();
1418                         return c;
1419                 }
1420         }
1421
1422         rcu_read_unlock();
1423
1424         return NULL;
1425 }
1426
1427 /* Returns true if an le connection is in the scanning state */
1428 static inline bool hci_is_le_conn_scanning(struct hci_dev *hdev)
1429 {
1430         struct hci_conn_hash *h = &hdev->conn_hash;
1431         struct hci_conn  *c;
1432
1433         rcu_read_lock();
1434
1435         list_for_each_entry_rcu(c, &h->list, list) {
1436                 if (c->type == LE_LINK && c->state == BT_CONNECT &&
1437                     test_bit(HCI_CONN_SCANNING, &c->flags)) {
1438                         rcu_read_unlock();
1439                         return true;
1440                 }
1441         }
1442
1443         rcu_read_unlock();
1444
1445         return false;
1446 }
1447
1448 int hci_disconnect(struct hci_conn *conn, __u8 reason);
1449 bool hci_setup_sync(struct hci_conn *conn, __u16 handle);
1450 void hci_sco_setup(struct hci_conn *conn, __u8 status);
1451 bool hci_iso_setup_path(struct hci_conn *conn);
1452 int hci_le_create_cis_pending(struct hci_dev *hdev);
1453 int hci_conn_check_create_cis(struct hci_conn *conn);
1454
1455 struct hci_conn *hci_conn_add(struct hci_dev *hdev, int type, bdaddr_t *dst,
1456                               u8 role, u16 handle);
1457 struct hci_conn *hci_conn_add_unset(struct hci_dev *hdev, int type,
1458                                     bdaddr_t *dst, u8 role);
1459 void hci_conn_del(struct hci_conn *conn);
1460 void hci_conn_hash_flush(struct hci_dev *hdev);
1461 void hci_conn_check_pending(struct hci_dev *hdev);
1462
1463 struct hci_chan *hci_chan_create(struct hci_conn *conn);
1464 void hci_chan_del(struct hci_chan *chan);
1465 void hci_chan_list_flush(struct hci_conn *conn);
1466 struct hci_chan *hci_chan_lookup_handle(struct hci_dev *hdev, __u16 handle);
1467
1468 struct hci_conn *hci_connect_le_scan(struct hci_dev *hdev, bdaddr_t *dst,
1469                                      u8 dst_type, u8 sec_level,
1470                                      u16 conn_timeout,
1471                                      enum conn_reasons conn_reason);
1472 struct hci_conn *hci_connect_le(struct hci_dev *hdev, bdaddr_t *dst,
1473                                 u8 dst_type, bool dst_resolved, u8 sec_level,
1474                                 u16 conn_timeout, u8 role);
1475 struct hci_conn *hci_connect_acl(struct hci_dev *hdev, bdaddr_t *dst,
1476                                  u8 sec_level, u8 auth_type,
1477                                  enum conn_reasons conn_reason);
1478 struct hci_conn *hci_connect_sco(struct hci_dev *hdev, int type, bdaddr_t *dst,
1479                                  __u16 setting, struct bt_codec *codec);
1480 struct hci_conn *hci_bind_cis(struct hci_dev *hdev, bdaddr_t *dst,
1481                               __u8 dst_type, struct bt_iso_qos *qos);
1482 struct hci_conn *hci_bind_bis(struct hci_dev *hdev, bdaddr_t *dst,
1483                               struct bt_iso_qos *qos,
1484                               __u8 base_len, __u8 *base);
1485 struct hci_conn *hci_connect_cis(struct hci_dev *hdev, bdaddr_t *dst,
1486                                  __u8 dst_type, struct bt_iso_qos *qos);
1487 struct hci_conn *hci_connect_bis(struct hci_dev *hdev, bdaddr_t *dst,
1488                                  __u8 dst_type, struct bt_iso_qos *qos,
1489                                  __u8 data_len, __u8 *data);
1490 int hci_pa_create_sync(struct hci_dev *hdev, bdaddr_t *dst, __u8 dst_type,
1491                        __u8 sid, struct bt_iso_qos *qos);
1492 int hci_le_big_create_sync(struct hci_dev *hdev, struct hci_conn *hcon,
1493                            struct bt_iso_qos *qos,
1494                            __u16 sync_handle, __u8 num_bis, __u8 bis[]);
1495 int hci_conn_check_link_mode(struct hci_conn *conn);
1496 int hci_conn_check_secure(struct hci_conn *conn, __u8 sec_level);
1497 int hci_conn_security(struct hci_conn *conn, __u8 sec_level, __u8 auth_type,
1498                       bool initiator);
1499 int hci_conn_switch_role(struct hci_conn *conn, __u8 role);
1500
1501 void hci_conn_enter_active_mode(struct hci_conn *conn, __u8 force_active);
1502
1503 void hci_conn_failed(struct hci_conn *conn, u8 status);
1504 u8 hci_conn_set_handle(struct hci_conn *conn, u16 handle);
1505
1506 /*
1507  * hci_conn_get() and hci_conn_put() are used to control the life-time of an
1508  * "hci_conn" object. They do not guarantee that the hci_conn object is running,
1509  * working or anything else. They just guarantee that the object is available
1510  * and can be dereferenced. So you can use its locks, local variables and any
1511  * other constant data.
1512  * Before accessing runtime data, you _must_ lock the object and then check that
1513  * it is still running. As soon as you release the locks, the connection might
1514  * get dropped, though.
1515  *
1516  * On the other hand, hci_conn_hold() and hci_conn_drop() are used to control
1517  * how long the underlying connection is held. So every channel that runs on the
1518  * hci_conn object calls this to prevent the connection from disappearing. As
1519  * long as you hold a device, you must also guarantee that you have a valid
1520  * reference to the device via hci_conn_get() (or the initial reference from
1521  * hci_conn_add()).
1522  * The hold()/drop() ref-count is known to drop below 0 sometimes, which doesn't
1523  * break because nobody cares for that. But this means, we cannot use
1524  * _get()/_drop() in it, but require the caller to have a valid ref (FIXME).
1525  */
1526
1527 static inline struct hci_conn *hci_conn_get(struct hci_conn *conn)
1528 {
1529         get_device(&conn->dev);
1530         return conn;
1531 }
1532
1533 static inline void hci_conn_put(struct hci_conn *conn)
1534 {
1535         put_device(&conn->dev);
1536 }
1537
1538 static inline struct hci_conn *hci_conn_hold(struct hci_conn *conn)
1539 {
1540         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1541
1542         atomic_inc(&conn->refcnt);
1543         cancel_delayed_work(&conn->disc_work);
1544
1545         return conn;
1546 }
1547
1548 static inline void hci_conn_drop(struct hci_conn *conn)
1549 {
1550         BT_DBG("hcon %p orig refcnt %d", conn, atomic_read(&conn->refcnt));
1551
1552         if (atomic_dec_and_test(&conn->refcnt)) {
1553                 unsigned long timeo;
1554
1555                 switch (conn->type) {
1556                 case ACL_LINK:
1557                 case LE_LINK:
1558                         cancel_delayed_work(&conn->idle_work);
1559                         if (conn->state == BT_CONNECTED) {
1560                                 timeo = conn->disc_timeout;
1561                                 if (!conn->out)
1562                                         timeo *= 2;
1563                         } else {
1564                                 timeo = 0;
1565                         }
1566                         break;
1567
1568                 case AMP_LINK:
1569                         timeo = conn->disc_timeout;
1570                         break;
1571
1572                 default:
1573                         timeo = 0;
1574                         break;
1575                 }
1576
1577                 cancel_delayed_work(&conn->disc_work);
1578                 queue_delayed_work(conn->hdev->workqueue,
1579                                    &conn->disc_work, timeo);
1580         }
1581 }
1582
1583 /* ----- HCI Devices ----- */
1584 static inline void hci_dev_put(struct hci_dev *d)
1585 {
1586         BT_DBG("%s orig refcnt %d", d->name,
1587                kref_read(&d->dev.kobj.kref));
1588
1589         put_device(&d->dev);
1590 }
1591
1592 static inline struct hci_dev *hci_dev_hold(struct hci_dev *d)
1593 {
1594         BT_DBG("%s orig refcnt %d", d->name,
1595                kref_read(&d->dev.kobj.kref));
1596
1597         get_device(&d->dev);
1598         return d;
1599 }
1600
1601 #define hci_dev_lock(d)         mutex_lock(&d->lock)
1602 #define hci_dev_unlock(d)       mutex_unlock(&d->lock)
1603
1604 #define to_hci_dev(d) container_of(d, struct hci_dev, dev)
1605 #define to_hci_conn(c) container_of(c, struct hci_conn, dev)
1606
1607 static inline void *hci_get_drvdata(struct hci_dev *hdev)
1608 {
1609         return dev_get_drvdata(&hdev->dev);
1610 }
1611
1612 static inline void hci_set_drvdata(struct hci_dev *hdev, void *data)
1613 {
1614         dev_set_drvdata(&hdev->dev, data);
1615 }
1616
1617 static inline void *hci_get_priv(struct hci_dev *hdev)
1618 {
1619         return (char *)hdev + sizeof(*hdev);
1620 }
1621
1622 struct hci_dev *hci_dev_get(int index);
1623 struct hci_dev *hci_get_route(bdaddr_t *dst, bdaddr_t *src, u8 src_type);
1624
1625 struct hci_dev *hci_alloc_dev_priv(int sizeof_priv);
1626
1627 static inline struct hci_dev *hci_alloc_dev(void)
1628 {
1629         return hci_alloc_dev_priv(0);
1630 }
1631
1632 void hci_free_dev(struct hci_dev *hdev);
1633 int hci_register_dev(struct hci_dev *hdev);
1634 void hci_unregister_dev(struct hci_dev *hdev);
1635 void hci_release_dev(struct hci_dev *hdev);
1636 int hci_register_suspend_notifier(struct hci_dev *hdev);
1637 int hci_unregister_suspend_notifier(struct hci_dev *hdev);
1638 int hci_suspend_dev(struct hci_dev *hdev);
1639 int hci_resume_dev(struct hci_dev *hdev);
1640 int hci_reset_dev(struct hci_dev *hdev);
1641 int hci_recv_frame(struct hci_dev *hdev, struct sk_buff *skb);
1642 int hci_recv_diag(struct hci_dev *hdev, struct sk_buff *skb);
1643 __printf(2, 3) void hci_set_hw_info(struct hci_dev *hdev, const char *fmt, ...);
1644 __printf(2, 3) void hci_set_fw_info(struct hci_dev *hdev, const char *fmt, ...);
1645
1646 static inline void hci_set_msft_opcode(struct hci_dev *hdev, __u16 opcode)
1647 {
1648 #if IS_ENABLED(CONFIG_BT_MSFTEXT)
1649         hdev->msft_opcode = opcode;
1650 #endif
1651 }
1652
1653 static inline void hci_set_aosp_capable(struct hci_dev *hdev)
1654 {
1655 #if IS_ENABLED(CONFIG_BT_AOSPEXT)
1656         hdev->aosp_capable = true;
1657 #endif
1658 }
1659
1660 static inline void hci_devcd_setup(struct hci_dev *hdev)
1661 {
1662 #ifdef CONFIG_DEV_COREDUMP
1663         INIT_WORK(&hdev->dump.dump_rx, hci_devcd_rx);
1664         INIT_DELAYED_WORK(&hdev->dump.dump_timeout, hci_devcd_timeout);
1665         skb_queue_head_init(&hdev->dump.dump_q);
1666 #endif
1667 }
1668
1669 int hci_dev_open(__u16 dev);
1670 int hci_dev_close(__u16 dev);
1671 int hci_dev_do_close(struct hci_dev *hdev);
1672 int hci_dev_reset(__u16 dev);
1673 int hci_dev_reset_stat(__u16 dev);
1674 int hci_dev_cmd(unsigned int cmd, void __user *arg);
1675 int hci_get_dev_list(void __user *arg);
1676 int hci_get_dev_info(void __user *arg);
1677 int hci_get_conn_list(void __user *arg);
1678 int hci_get_conn_info(struct hci_dev *hdev, void __user *arg);
1679 int hci_get_auth_info(struct hci_dev *hdev, void __user *arg);
1680 int hci_inquiry(void __user *arg);
1681
1682 struct bdaddr_list *hci_bdaddr_list_lookup(struct list_head *list,
1683                                            bdaddr_t *bdaddr, u8 type);
1684 struct bdaddr_list_with_irk *hci_bdaddr_list_lookup_with_irk(
1685                                     struct list_head *list, bdaddr_t *bdaddr,
1686                                     u8 type);
1687 struct bdaddr_list_with_flags *
1688 hci_bdaddr_list_lookup_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1689                                   u8 type);
1690 int hci_bdaddr_list_add(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1691 int hci_bdaddr_list_add_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1692                                  u8 type, u8 *peer_irk, u8 *local_irk);
1693 int hci_bdaddr_list_add_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1694                                    u8 type, u32 flags);
1695 int hci_bdaddr_list_del(struct list_head *list, bdaddr_t *bdaddr, u8 type);
1696 int hci_bdaddr_list_del_with_irk(struct list_head *list, bdaddr_t *bdaddr,
1697                                  u8 type);
1698 int hci_bdaddr_list_del_with_flags(struct list_head *list, bdaddr_t *bdaddr,
1699                                    u8 type);
1700 void hci_bdaddr_list_clear(struct list_head *list);
1701
1702 struct hci_conn_params *hci_conn_params_lookup(struct hci_dev *hdev,
1703                                                bdaddr_t *addr, u8 addr_type);
1704 struct hci_conn_params *hci_conn_params_add(struct hci_dev *hdev,
1705                                             bdaddr_t *addr, u8 addr_type);
1706 void hci_conn_params_del(struct hci_dev *hdev, bdaddr_t *addr, u8 addr_type);
1707 void hci_conn_params_clear_disabled(struct hci_dev *hdev);
1708 void hci_conn_params_free(struct hci_conn_params *param);
1709
1710 void hci_pend_le_list_del_init(struct hci_conn_params *param);
1711 void hci_pend_le_list_add(struct hci_conn_params *param,
1712                           struct list_head *list);
1713 struct hci_conn_params *hci_pend_le_action_lookup(struct list_head *list,
1714                                                   bdaddr_t *addr,
1715                                                   u8 addr_type);
1716
1717 void hci_uuids_clear(struct hci_dev *hdev);
1718
1719 void hci_link_keys_clear(struct hci_dev *hdev);
1720 struct link_key *hci_find_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1721 struct link_key *hci_add_link_key(struct hci_dev *hdev, struct hci_conn *conn,
1722                                   bdaddr_t *bdaddr, u8 *val, u8 type,
1723                                   u8 pin_len, bool *persistent);
1724 struct smp_ltk *hci_add_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1725                             u8 addr_type, u8 type, u8 authenticated,
1726                             u8 tk[16], u8 enc_size, __le16 ediv, __le64 rand);
1727 struct smp_ltk *hci_find_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1728                              u8 addr_type, u8 role);
1729 int hci_remove_ltk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 bdaddr_type);
1730 void hci_smp_ltks_clear(struct hci_dev *hdev);
1731 int hci_remove_link_key(struct hci_dev *hdev, bdaddr_t *bdaddr);
1732
1733 struct smp_irk *hci_find_irk_by_rpa(struct hci_dev *hdev, bdaddr_t *rpa);
1734 struct smp_irk *hci_find_irk_by_addr(struct hci_dev *hdev, bdaddr_t *bdaddr,
1735                                      u8 addr_type);
1736 struct smp_irk *hci_add_irk(struct hci_dev *hdev, bdaddr_t *bdaddr,
1737                             u8 addr_type, u8 val[16], bdaddr_t *rpa);
1738 void hci_remove_irk(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 addr_type);
1739 bool hci_is_blocked_key(struct hci_dev *hdev, u8 type, u8 val[16]);
1740 void hci_blocked_keys_clear(struct hci_dev *hdev);
1741 void hci_smp_irks_clear(struct hci_dev *hdev);
1742
1743 bool hci_bdaddr_is_paired(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 type);
1744
1745 void hci_remote_oob_data_clear(struct hci_dev *hdev);
1746 struct oob_data *hci_find_remote_oob_data(struct hci_dev *hdev,
1747                                           bdaddr_t *bdaddr, u8 bdaddr_type);
1748 int hci_add_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1749                             u8 bdaddr_type, u8 *hash192, u8 *rand192,
1750                             u8 *hash256, u8 *rand256);
1751 int hci_remove_remote_oob_data(struct hci_dev *hdev, bdaddr_t *bdaddr,
1752                                u8 bdaddr_type);
1753
1754 void hci_adv_instances_clear(struct hci_dev *hdev);
1755 struct adv_info *hci_find_adv_instance(struct hci_dev *hdev, u8 instance);
1756 struct adv_info *hci_get_next_instance(struct hci_dev *hdev, u8 instance);
1757 struct adv_info *hci_add_adv_instance(struct hci_dev *hdev, u8 instance,
1758                                       u32 flags, u16 adv_data_len, u8 *adv_data,
1759                                       u16 scan_rsp_len, u8 *scan_rsp_data,
1760                                       u16 timeout, u16 duration, s8 tx_power,
1761                                       u32 min_interval, u32 max_interval,
1762                                       u8 mesh_handle);
1763 struct adv_info *hci_add_per_instance(struct hci_dev *hdev, u8 instance,
1764                                       u32 flags, u8 data_len, u8 *data,
1765                                       u32 min_interval, u32 max_interval);
1766 int hci_set_adv_instance_data(struct hci_dev *hdev, u8 instance,
1767                          u16 adv_data_len, u8 *adv_data,
1768                          u16 scan_rsp_len, u8 *scan_rsp_data);
1769 int hci_remove_adv_instance(struct hci_dev *hdev, u8 instance);
1770 void hci_adv_instances_set_rpa_expired(struct hci_dev *hdev, bool rpa_expired);
1771 u32 hci_adv_instance_flags(struct hci_dev *hdev, u8 instance);
1772 bool hci_adv_instance_is_scannable(struct hci_dev *hdev, u8 instance);
1773
1774 void hci_adv_monitors_clear(struct hci_dev *hdev);
1775 void hci_free_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1776 int hci_add_adv_monitor(struct hci_dev *hdev, struct adv_monitor *monitor);
1777 int hci_remove_single_adv_monitor(struct hci_dev *hdev, u16 handle);
1778 int hci_remove_all_adv_monitor(struct hci_dev *hdev);
1779 bool hci_is_adv_monitoring(struct hci_dev *hdev);
1780 int hci_get_adv_monitor_offload_ext(struct hci_dev *hdev);
1781
1782 void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb);
1783
1784 void hci_init_sysfs(struct hci_dev *hdev);
1785 void hci_conn_init_sysfs(struct hci_conn *conn);
1786 void hci_conn_add_sysfs(struct hci_conn *conn);
1787 void hci_conn_del_sysfs(struct hci_conn *conn);
1788
1789 #define SET_HCIDEV_DEV(hdev, pdev) ((hdev)->dev.parent = (pdev))
1790 #define GET_HCIDEV_DEV(hdev) ((hdev)->dev.parent)
1791
1792 /* ----- LMP capabilities ----- */
1793 #define lmp_encrypt_capable(dev)   ((dev)->features[0][0] & LMP_ENCRYPT)
1794 #define lmp_rswitch_capable(dev)   ((dev)->features[0][0] & LMP_RSWITCH)
1795 #define lmp_hold_capable(dev)      ((dev)->features[0][0] & LMP_HOLD)
1796 #define lmp_sniff_capable(dev)     ((dev)->features[0][0] & LMP_SNIFF)
1797 #define lmp_park_capable(dev)      ((dev)->features[0][1] & LMP_PARK)
1798 #define lmp_inq_rssi_capable(dev)  ((dev)->features[0][3] & LMP_RSSI_INQ)
1799 #define lmp_esco_capable(dev)      ((dev)->features[0][3] & LMP_ESCO)
1800 #define lmp_bredr_capable(dev)     (!((dev)->features[0][4] & LMP_NO_BREDR))
1801 #define lmp_le_capable(dev)        ((dev)->features[0][4] & LMP_LE)
1802 #define lmp_sniffsubr_capable(dev) ((dev)->features[0][5] & LMP_SNIFF_SUBR)
1803 #define lmp_pause_enc_capable(dev) ((dev)->features[0][5] & LMP_PAUSE_ENC)
1804 #define lmp_esco_2m_capable(dev)   ((dev)->features[0][5] & LMP_EDR_ESCO_2M)
1805 #define lmp_ext_inq_capable(dev)   ((dev)->features[0][6] & LMP_EXT_INQ)
1806 #define lmp_le_br_capable(dev)     (!!((dev)->features[0][6] & LMP_SIMUL_LE_BR))
1807 #define lmp_ssp_capable(dev)       ((dev)->features[0][6] & LMP_SIMPLE_PAIR)
1808 #define lmp_no_flush_capable(dev)  ((dev)->features[0][6] & LMP_NO_FLUSH)
1809 #define lmp_lsto_capable(dev)      ((dev)->features[0][7] & LMP_LSTO)
1810 #define lmp_inq_tx_pwr_capable(dev) ((dev)->features[0][7] & LMP_INQ_TX_PWR)
1811 #define lmp_ext_feat_capable(dev)  ((dev)->features[0][7] & LMP_EXTFEATURES)
1812 #define lmp_transp_capable(dev)    ((dev)->features[0][2] & LMP_TRANSPARENT)
1813 #define lmp_edr_2m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_2M)
1814 #define lmp_edr_3m_capable(dev)    ((dev)->features[0][3] & LMP_EDR_3M)
1815 #define lmp_edr_3slot_capable(dev) ((dev)->features[0][4] & LMP_EDR_3SLOT)
1816 #define lmp_edr_5slot_capable(dev) ((dev)->features[0][5] & LMP_EDR_5SLOT)
1817
1818 /* ----- Extended LMP capabilities ----- */
1819 #define lmp_cpb_central_capable(dev) ((dev)->features[2][0] & LMP_CPB_CENTRAL)
1820 #define lmp_cpb_peripheral_capable(dev) ((dev)->features[2][0] & LMP_CPB_PERIPHERAL)
1821 #define lmp_sync_train_capable(dev) ((dev)->features[2][0] & LMP_SYNC_TRAIN)
1822 #define lmp_sync_scan_capable(dev)  ((dev)->features[2][0] & LMP_SYNC_SCAN)
1823 #define lmp_sc_capable(dev)         ((dev)->features[2][1] & LMP_SC)
1824 #define lmp_ping_capable(dev)       ((dev)->features[2][1] & LMP_PING)
1825
1826 /* ----- Host capabilities ----- */
1827 #define lmp_host_ssp_capable(dev)  ((dev)->features[1][0] & LMP_HOST_SSP)
1828 #define lmp_host_sc_capable(dev)   ((dev)->features[1][0] & LMP_HOST_SC)
1829 #define lmp_host_le_capable(dev)   (!!((dev)->features[1][0] & LMP_HOST_LE))
1830 #define lmp_host_le_br_capable(dev) (!!((dev)->features[1][0] & LMP_HOST_LE_BREDR))
1831
1832 #define hdev_is_powered(dev)   (test_bit(HCI_UP, &(dev)->flags) && \
1833                                 !hci_dev_test_flag(dev, HCI_AUTO_OFF))
1834 #define bredr_sc_enabled(dev)  (lmp_sc_capable(dev) && \
1835                                 hci_dev_test_flag(dev, HCI_SC_ENABLED))
1836 #define rpa_valid(dev)         (bacmp(&dev->rpa, BDADDR_ANY) && \
1837                                 !hci_dev_test_flag(dev, HCI_RPA_EXPIRED))
1838 #define adv_rpa_valid(adv)     (bacmp(&adv->random_addr, BDADDR_ANY) && \
1839                                 !adv->rpa_expired)
1840
1841 #define scan_1m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_1M) || \
1842                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_1M))
1843
1844 #define le_2m_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_2M))
1845
1846 #define scan_2m(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_2M) || \
1847                       ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_2M))
1848
1849 #define le_coded_capable(dev) (((dev)->le_features[1] & HCI_LE_PHY_CODED) && \
1850                                !test_bit(HCI_QUIRK_BROKEN_LE_CODED, \
1851                                          &(dev)->quirks))
1852
1853 #define scan_coded(dev) (((dev)->le_tx_def_phys & HCI_LE_SET_PHY_CODED) || \
1854                          ((dev)->le_rx_def_phys & HCI_LE_SET_PHY_CODED))
1855
1856 #define ll_privacy_capable(dev) ((dev)->le_features[0] & HCI_LE_LL_PRIVACY)
1857
1858 /* Use LL Privacy based address resolution if supported */
1859 #define use_ll_privacy(dev) (ll_privacy_capable(dev) && \
1860                              hci_dev_test_flag(dev, HCI_ENABLE_LL_PRIVACY))
1861
1862 #define privacy_mode_capable(dev) (use_ll_privacy(dev) && \
1863                                    (hdev->commands[39] & 0x04))
1864
1865 /* Use enhanced synchronous connection if command is supported and its quirk
1866  * has not been set.
1867  */
1868 #define enhanced_sync_conn_capable(dev) \
1869         (((dev)->commands[29] & 0x08) && \
1870          !test_bit(HCI_QUIRK_BROKEN_ENHANCED_SETUP_SYNC_CONN, &(dev)->quirks))
1871
1872 /* Use ext scanning if set ext scan param and ext scan enable is supported */
1873 #define use_ext_scan(dev) (((dev)->commands[37] & 0x20) && \
1874                            ((dev)->commands[37] & 0x40) && \
1875                            !test_bit(HCI_QUIRK_BROKEN_EXT_SCAN, &(dev)->quirks))
1876
1877 /* Use ext create connection if command is supported */
1878 #define use_ext_conn(dev) ((dev)->commands[37] & 0x80)
1879
1880 /* Extended advertising support */
1881 #define ext_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_EXT_ADV))
1882
1883 /* Maximum advertising length */
1884 #define max_adv_len(dev) \
1885         (ext_adv_capable(dev) ? HCI_MAX_EXT_AD_LENGTH : HCI_MAX_AD_LENGTH)
1886
1887 /* BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 4, Part E page 1789:
1888  *
1889  * C24: Mandatory if the LE Controller supports Connection State and either
1890  * LE Feature (LL Privacy) or LE Feature (Extended Advertising) is supported
1891  */
1892 #define use_enhanced_conn_complete(dev) (ll_privacy_capable(dev) || \
1893                                          ext_adv_capable(dev))
1894
1895 /* Periodic advertising support */
1896 #define per_adv_capable(dev) (((dev)->le_features[1] & HCI_LE_PERIODIC_ADV))
1897
1898 /* CIS Master/Slave and BIS support */
1899 #define iso_capable(dev) (cis_capable(dev) || bis_capable(dev))
1900 #define cis_capable(dev) \
1901         (cis_central_capable(dev) || cis_peripheral_capable(dev))
1902 #define cis_central_capable(dev) \
1903         ((dev)->le_features[3] & HCI_LE_CIS_CENTRAL)
1904 #define cis_peripheral_capable(dev) \
1905         ((dev)->le_features[3] & HCI_LE_CIS_PERIPHERAL)
1906 #define bis_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_BROADCASTER)
1907 #define sync_recv_capable(dev) ((dev)->le_features[3] & HCI_LE_ISO_SYNC_RECEIVER)
1908
1909 #define mws_transport_config_capable(dev) (((dev)->commands[30] & 0x08) && \
1910         (!test_bit(HCI_QUIRK_BROKEN_MWS_TRANSPORT_CONFIG, &(dev)->quirks)))
1911
1912 /* ----- HCI protocols ----- */
1913 #define HCI_PROTO_DEFER             0x01
1914
1915 static inline int hci_proto_connect_ind(struct hci_dev *hdev, bdaddr_t *bdaddr,
1916                                         __u8 type, __u8 *flags)
1917 {
1918         switch (type) {
1919         case ACL_LINK:
1920                 return l2cap_connect_ind(hdev, bdaddr);
1921
1922         case SCO_LINK:
1923         case ESCO_LINK:
1924                 return sco_connect_ind(hdev, bdaddr, flags);
1925
1926         case ISO_LINK:
1927                 return iso_connect_ind(hdev, bdaddr, flags);
1928
1929         default:
1930                 BT_ERR("unknown link type %d", type);
1931                 return -EINVAL;
1932         }
1933 }
1934
1935 static inline int hci_proto_disconn_ind(struct hci_conn *conn)
1936 {
1937         if (conn->type != ACL_LINK && conn->type != LE_LINK)
1938                 return HCI_ERROR_REMOTE_USER_TERM;
1939
1940         return l2cap_disconn_ind(conn);
1941 }
1942
1943 /* ----- HCI callbacks ----- */
1944 struct hci_cb {
1945         struct list_head list;
1946
1947         char *name;
1948
1949         void (*connect_cfm)     (struct hci_conn *conn, __u8 status);
1950         void (*disconn_cfm)     (struct hci_conn *conn, __u8 status);
1951         void (*security_cfm)    (struct hci_conn *conn, __u8 status,
1952                                                                 __u8 encrypt);
1953         void (*key_change_cfm)  (struct hci_conn *conn, __u8 status);
1954         void (*role_switch_cfm) (struct hci_conn *conn, __u8 status, __u8 role);
1955 };
1956
1957 static inline void hci_connect_cfm(struct hci_conn *conn, __u8 status)
1958 {
1959         struct hci_cb *cb;
1960
1961         mutex_lock(&hci_cb_list_lock);
1962         list_for_each_entry(cb, &hci_cb_list, list) {
1963                 if (cb->connect_cfm)
1964                         cb->connect_cfm(conn, status);
1965         }
1966         mutex_unlock(&hci_cb_list_lock);
1967
1968         if (conn->connect_cfm_cb)
1969                 conn->connect_cfm_cb(conn, status);
1970 }
1971
1972 static inline void hci_disconn_cfm(struct hci_conn *conn, __u8 reason)
1973 {
1974         struct hci_cb *cb;
1975
1976         mutex_lock(&hci_cb_list_lock);
1977         list_for_each_entry(cb, &hci_cb_list, list) {
1978                 if (cb->disconn_cfm)
1979                         cb->disconn_cfm(conn, reason);
1980         }
1981         mutex_unlock(&hci_cb_list_lock);
1982
1983         if (conn->disconn_cfm_cb)
1984                 conn->disconn_cfm_cb(conn, reason);
1985 }
1986
1987 static inline void hci_auth_cfm(struct hci_conn *conn, __u8 status)
1988 {
1989         struct hci_cb *cb;
1990         __u8 encrypt;
1991
1992         if (test_bit(HCI_CONN_ENCRYPT_PEND, &conn->flags))
1993                 return;
1994
1995         encrypt = test_bit(HCI_CONN_ENCRYPT, &conn->flags) ? 0x01 : 0x00;
1996
1997         mutex_lock(&hci_cb_list_lock);
1998         list_for_each_entry(cb, &hci_cb_list, list) {
1999                 if (cb->security_cfm)
2000                         cb->security_cfm(conn, status, encrypt);
2001         }
2002         mutex_unlock(&hci_cb_list_lock);
2003
2004         if (conn->security_cfm_cb)
2005                 conn->security_cfm_cb(conn, status);
2006 }
2007
2008 static inline void hci_encrypt_cfm(struct hci_conn *conn, __u8 status)
2009 {
2010         struct hci_cb *cb;
2011         __u8 encrypt;
2012
2013         if (conn->state == BT_CONFIG) {
2014                 if (!status)
2015                         conn->state = BT_CONNECTED;
2016
2017                 hci_connect_cfm(conn, status);
2018                 hci_conn_drop(conn);
2019                 return;
2020         }
2021
2022         if (!test_bit(HCI_CONN_ENCRYPT, &conn->flags))
2023                 encrypt = 0x00;
2024         else if (test_bit(HCI_CONN_AES_CCM, &conn->flags))
2025                 encrypt = 0x02;
2026         else
2027                 encrypt = 0x01;
2028
2029         if (!status) {
2030                 if (conn->sec_level == BT_SECURITY_SDP)
2031                         conn->sec_level = BT_SECURITY_LOW;
2032
2033                 if (conn->pending_sec_level > conn->sec_level)
2034                         conn->sec_level = conn->pending_sec_level;
2035         }
2036
2037         mutex_lock(&hci_cb_list_lock);
2038         list_for_each_entry(cb, &hci_cb_list, list) {
2039                 if (cb->security_cfm)
2040                         cb->security_cfm(conn, status, encrypt);
2041         }
2042         mutex_unlock(&hci_cb_list_lock);
2043
2044         if (conn->security_cfm_cb)
2045                 conn->security_cfm_cb(conn, status);
2046 }
2047
2048 static inline void hci_key_change_cfm(struct hci_conn *conn, __u8 status)
2049 {
2050         struct hci_cb *cb;
2051
2052         mutex_lock(&hci_cb_list_lock);
2053         list_for_each_entry(cb, &hci_cb_list, list) {
2054                 if (cb->key_change_cfm)
2055                         cb->key_change_cfm(conn, status);
2056         }
2057         mutex_unlock(&hci_cb_list_lock);
2058 }
2059
2060 static inline void hci_role_switch_cfm(struct hci_conn *conn, __u8 status,
2061                                                                 __u8 role)
2062 {
2063         struct hci_cb *cb;
2064
2065         mutex_lock(&hci_cb_list_lock);
2066         list_for_each_entry(cb, &hci_cb_list, list) {
2067                 if (cb->role_switch_cfm)
2068                         cb->role_switch_cfm(conn, status, role);
2069         }
2070         mutex_unlock(&hci_cb_list_lock);
2071 }
2072
2073 static inline bool hci_bdaddr_is_rpa(bdaddr_t *bdaddr, u8 addr_type)
2074 {
2075         if (addr_type != ADDR_LE_DEV_RANDOM)
2076                 return false;
2077
2078         if ((bdaddr->b[5] & 0xc0) == 0x40)
2079                return true;
2080
2081         return false;
2082 }
2083
2084 static inline bool hci_is_identity_address(bdaddr_t *addr, u8 addr_type)
2085 {
2086         if (addr_type == ADDR_LE_DEV_PUBLIC)
2087                 return true;
2088
2089         /* Check for Random Static address type */
2090         if ((addr->b[5] & 0xc0) == 0xc0)
2091                 return true;
2092
2093         return false;
2094 }
2095
2096 static inline struct smp_irk *hci_get_irk(struct hci_dev *hdev,
2097                                           bdaddr_t *bdaddr, u8 addr_type)
2098 {
2099         if (!hci_bdaddr_is_rpa(bdaddr, addr_type))
2100                 return NULL;
2101
2102         return hci_find_irk_by_rpa(hdev, bdaddr);
2103 }
2104
2105 static inline int hci_check_conn_params(u16 min, u16 max, u16 latency,
2106                                         u16 to_multiplier)
2107 {
2108         u16 max_latency;
2109
2110         if (min > max || min < 6 || max > 3200)
2111                 return -EINVAL;
2112
2113         if (to_multiplier < 10 || to_multiplier > 3200)
2114                 return -EINVAL;
2115
2116         if (max >= to_multiplier * 8)
2117                 return -EINVAL;
2118
2119         max_latency = (to_multiplier * 4 / max) - 1;
2120         if (latency > 499 || latency > max_latency)
2121                 return -EINVAL;
2122
2123         return 0;
2124 }
2125
2126 int hci_register_cb(struct hci_cb *hcb);
2127 int hci_unregister_cb(struct hci_cb *hcb);
2128
2129 int __hci_cmd_send(struct hci_dev *hdev, u16 opcode, u32 plen,
2130                    const void *param);
2131
2132 int hci_send_cmd(struct hci_dev *hdev, __u16 opcode, __u32 plen,
2133                  const void *param);
2134 void hci_send_acl(struct hci_chan *chan, struct sk_buff *skb, __u16 flags);
2135 void hci_send_sco(struct hci_conn *conn, struct sk_buff *skb);
2136 void hci_send_iso(struct hci_conn *conn, struct sk_buff *skb);
2137
2138 void *hci_sent_cmd_data(struct hci_dev *hdev, __u16 opcode);
2139 void *hci_recv_event_data(struct hci_dev *hdev, __u8 event);
2140
2141 u32 hci_conn_get_phy(struct hci_conn *conn);
2142
2143 /* ----- HCI Sockets ----- */
2144 void hci_send_to_sock(struct hci_dev *hdev, struct sk_buff *skb);
2145 void hci_send_to_channel(unsigned short channel, struct sk_buff *skb,
2146                          int flag, struct sock *skip_sk);
2147 void hci_send_to_monitor(struct hci_dev *hdev, struct sk_buff *skb);
2148 void hci_send_monitor_ctrl_event(struct hci_dev *hdev, u16 event,
2149                                  void *data, u16 data_len, ktime_t tstamp,
2150                                  int flag, struct sock *skip_sk);
2151
2152 void hci_sock_dev_event(struct hci_dev *hdev, int event);
2153
2154 #define HCI_MGMT_VAR_LEN        BIT(0)
2155 #define HCI_MGMT_NO_HDEV        BIT(1)
2156 #define HCI_MGMT_UNTRUSTED      BIT(2)
2157 #define HCI_MGMT_UNCONFIGURED   BIT(3)
2158 #define HCI_MGMT_HDEV_OPTIONAL  BIT(4)
2159
2160 struct hci_mgmt_handler {
2161         int (*func) (struct sock *sk, struct hci_dev *hdev, void *data,
2162                      u16 data_len);
2163         size_t data_len;
2164         unsigned long flags;
2165 };
2166
2167 struct hci_mgmt_chan {
2168         struct list_head list;
2169         unsigned short channel;
2170         size_t handler_count;
2171         const struct hci_mgmt_handler *handlers;
2172         void (*hdev_init) (struct sock *sk, struct hci_dev *hdev);
2173 };
2174
2175 int hci_mgmt_chan_register(struct hci_mgmt_chan *c);
2176 void hci_mgmt_chan_unregister(struct hci_mgmt_chan *c);
2177
2178 /* Management interface */
2179 #define DISCOV_TYPE_BREDR               (BIT(BDADDR_BREDR))
2180 #define DISCOV_TYPE_LE                  (BIT(BDADDR_LE_PUBLIC) | \
2181                                          BIT(BDADDR_LE_RANDOM))
2182 #define DISCOV_TYPE_INTERLEAVED         (BIT(BDADDR_BREDR) | \
2183                                          BIT(BDADDR_LE_PUBLIC) | \
2184                                          BIT(BDADDR_LE_RANDOM))
2185
2186 /* These LE scan and inquiry parameters were chosen according to LE General
2187  * Discovery Procedure specification.
2188  */
2189 #define DISCOV_LE_SCAN_WIN              0x12
2190 #define DISCOV_LE_SCAN_INT              0x12
2191 #define DISCOV_LE_TIMEOUT               10240   /* msec */
2192 #define DISCOV_INTERLEAVED_TIMEOUT      5120    /* msec */
2193 #define DISCOV_INTERLEAVED_INQUIRY_LEN  0x04
2194 #define DISCOV_BREDR_INQUIRY_LEN        0x08
2195 #define DISCOV_LE_RESTART_DELAY         msecs_to_jiffies(200)   /* msec */
2196 #define DISCOV_LE_FAST_ADV_INT_MIN      0x00A0  /* 100 msec */
2197 #define DISCOV_LE_FAST_ADV_INT_MAX      0x00F0  /* 150 msec */
2198 #define DISCOV_LE_PER_ADV_INT_MIN       0x00A0  /* 200 msec */
2199 #define DISCOV_LE_PER_ADV_INT_MAX       0x00A0  /* 200 msec */
2200 #define DISCOV_LE_ADV_MESH_MIN          0x00A0  /* 100 msec */
2201 #define DISCOV_LE_ADV_MESH_MAX          0x00A0  /* 100 msec */
2202 #define INTERVAL_TO_MS(x)               (((x) * 10) / 0x10)
2203
2204 #define NAME_RESOLVE_DURATION           msecs_to_jiffies(10240) /* 10.24 sec */
2205
2206 void mgmt_fill_version_info(void *ver);
2207 int mgmt_new_settings(struct hci_dev *hdev);
2208 void mgmt_index_added(struct hci_dev *hdev);
2209 void mgmt_index_removed(struct hci_dev *hdev);
2210 void mgmt_set_powered_failed(struct hci_dev *hdev, int err);
2211 void mgmt_power_on(struct hci_dev *hdev, int err);
2212 void __mgmt_power_off(struct hci_dev *hdev);
2213 void mgmt_new_link_key(struct hci_dev *hdev, struct link_key *key,
2214                        bool persistent);
2215 void mgmt_device_connected(struct hci_dev *hdev, struct hci_conn *conn,
2216                            u8 *name, u8 name_len);
2217 void mgmt_device_disconnected(struct hci_dev *hdev, bdaddr_t *bdaddr,
2218                               u8 link_type, u8 addr_type, u8 reason,
2219                               bool mgmt_connected);
2220 void mgmt_disconnect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr,
2221                             u8 link_type, u8 addr_type, u8 status);
2222 void mgmt_connect_failed(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2223                          u8 addr_type, u8 status);
2224 void mgmt_pin_code_request(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 secure);
2225 void mgmt_pin_code_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2226                                   u8 status);
2227 void mgmt_pin_code_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2228                                       u8 status);
2229 int mgmt_user_confirm_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2230                               u8 link_type, u8 addr_type, u32 value,
2231                               u8 confirm_hint);
2232 int mgmt_user_confirm_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2233                                      u8 link_type, u8 addr_type, u8 status);
2234 int mgmt_user_confirm_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2235                                          u8 link_type, u8 addr_type, u8 status);
2236 int mgmt_user_passkey_request(struct hci_dev *hdev, bdaddr_t *bdaddr,
2237                               u8 link_type, u8 addr_type);
2238 int mgmt_user_passkey_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2239                                      u8 link_type, u8 addr_type, u8 status);
2240 int mgmt_user_passkey_neg_reply_complete(struct hci_dev *hdev, bdaddr_t *bdaddr,
2241                                          u8 link_type, u8 addr_type, u8 status);
2242 int mgmt_user_passkey_notify(struct hci_dev *hdev, bdaddr_t *bdaddr,
2243                              u8 link_type, u8 addr_type, u32 passkey,
2244                              u8 entered);
2245 void mgmt_auth_failed(struct hci_conn *conn, u8 status);
2246 void mgmt_auth_enable_complete(struct hci_dev *hdev, u8 status);
2247 void mgmt_set_class_of_dev_complete(struct hci_dev *hdev, u8 *dev_class,
2248                                     u8 status);
2249 void mgmt_set_local_name_complete(struct hci_dev *hdev, u8 *name, u8 status);
2250 void mgmt_start_discovery_complete(struct hci_dev *hdev, u8 status);
2251 void mgmt_stop_discovery_complete(struct hci_dev *hdev, u8 status);
2252 void mgmt_device_found(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2253                        u8 addr_type, u8 *dev_class, s8 rssi, u32 flags,
2254                        u8 *eir, u16 eir_len, u8 *scan_rsp, u8 scan_rsp_len,
2255                        u64 instant);
2256 void mgmt_remote_name(struct hci_dev *hdev, bdaddr_t *bdaddr, u8 link_type,
2257                       u8 addr_type, s8 rssi, u8 *name, u8 name_len);
2258 void mgmt_discovering(struct hci_dev *hdev, u8 discovering);
2259 void mgmt_suspending(struct hci_dev *hdev, u8 state);
2260 void mgmt_resuming(struct hci_dev *hdev, u8 reason, bdaddr_t *bdaddr,
2261                    u8 addr_type);
2262 bool mgmt_powering_down(struct hci_dev *hdev);
2263 void mgmt_new_ltk(struct hci_dev *hdev, struct smp_ltk *key, bool persistent);
2264 void mgmt_new_irk(struct hci_dev *hdev, struct smp_irk *irk, bool persistent);
2265 void mgmt_new_csrk(struct hci_dev *hdev, struct smp_csrk *csrk,
2266                    bool persistent);
2267 void mgmt_new_conn_param(struct hci_dev *hdev, bdaddr_t *bdaddr,
2268                          u8 bdaddr_type, u8 store_hint, u16 min_interval,
2269                          u16 max_interval, u16 latency, u16 timeout);
2270 void mgmt_smp_complete(struct hci_conn *conn, bool complete);
2271 bool mgmt_get_connectable(struct hci_dev *hdev);
2272 u8 mgmt_get_adv_discov_flags(struct hci_dev *hdev);
2273 void mgmt_advertising_added(struct sock *sk, struct hci_dev *hdev,
2274                             u8 instance);
2275 void mgmt_advertising_removed(struct sock *sk, struct hci_dev *hdev,
2276                               u8 instance);
2277 void mgmt_adv_monitor_removed(struct hci_dev *hdev, u16 handle);
2278 int mgmt_phy_configuration_changed(struct hci_dev *hdev, struct sock *skip);
2279 void mgmt_adv_monitor_device_lost(struct hci_dev *hdev, u16 handle,
2280                                   bdaddr_t *bdaddr, u8 addr_type);
2281
2282 int hci_abort_conn(struct hci_conn *conn, u8 reason);
2283 u8 hci_le_conn_update(struct hci_conn *conn, u16 min, u16 max, u16 latency,
2284                       u16 to_multiplier);
2285 void hci_le_start_enc(struct hci_conn *conn, __le16 ediv, __le64 rand,
2286                       __u8 ltk[16], __u8 key_size);
2287
2288 void hci_copy_identity_address(struct hci_dev *hdev, bdaddr_t *bdaddr,
2289                                u8 *bdaddr_type);
2290
2291 #define SCO_AIRMODE_MASK       0x0003
2292 #define SCO_AIRMODE_CVSD       0x0000
2293 #define SCO_AIRMODE_TRANSP     0x0003
2294
2295 #define LOCAL_CODEC_ACL_MASK    BIT(0)
2296 #define LOCAL_CODEC_SCO_MASK    BIT(1)
2297
2298 #define TRANSPORT_TYPE_MAX      0x04
2299
2300 #endif /* __HCI_CORE_H */